CVE-2021-3165

SmartAgent 3.1.0 allows a ViewOnly attacker to create a SuperUser account via the //CampaignManager/users URI...

CVE-2021-3165

CVE-2021-3165 affects SmartAgent 3.1.0. A ViewOnly attacker can escalate to a SuperUser by accessing the /#/CampaignManager/users URI, enabling privilege escalation with high impact as per the CVSS data in the connected records. The documents do not provide a specific fix or patched version; expl...

CVE-2021-3165: Incorrect Permission Assignment for Critical Resource

SmartAgent 3.1.0 allows a ViewOnly attacker to create a SuperUser account via the //CampaignManager/users URI...

PT-2021-19462

Name of the Vulnerable Software and Affected Versions SmartAgent version 3.1.0 Description The issue allows a ViewOnly attacker to create a SuperUser account via the "//CampaignManager/users" API endpoint. This enables the attacker to elevate their privileges. Recommendations For SmartAgent versi...

SmartAgent Security Vulnerabilities

A security vulnerability exists in SmartAgent 3.1.0 that can be exploited by an attacker to create Super Administrators via //CampaignManager/users...

SmartAgent 3.1.0 Privilege Escalation

Exploit Title: SmartAgent 3.1.0 - Privilege Escalation Date: 01-11-2021 Exploit Author: Orion Hridoy Vendor Homepage: https://www.smartagent.io/ Version: Build 3.1.0 Tested on: Windows 10/Kali Linux A Low grade user like ViewOnly can create an account with SuperUser permission. Steps To Reproduce...

SmartAgent 3.1.0 - Privilege Escalation

Exploit Title: SmartAgent 3.1.0 - Privilege Escalation Date: 01-11-2021 Exploit Author: Orion Hridoy Vendor Homepage: https://www.smartagent.io/ Version: Build 3.1.0 Tested on: Windows 10/Kali Linux A Low grade user like ViewOnly can create an account with SuperUser permission. Steps To Reproduce...